McAfee True Key (TK) Windows Client Elevation of Privilege Vulnerability

McAfee True Key TK is an authentication application from the American company McAfee. The program supports features such as facial information recognition and fingerprint recognition. A privilege extraction vulnerability exists in the Microsoft Windows client in McAfee TK 5.1.230.7 and earlier...

CVE-2018-6756

Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware...

CVE-2018-6757

Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...

CVE-2018-6757

Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...

CVE-2018-6756

Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware...

CVE-2018-6755

Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...

CVE-2018-6755

Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...

Directory traversal

Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...

Authentication flaw

Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware...

Privilege escalation

Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...

CVE-2018-6755

CVE-2018-6755 affects the McAfee True Key Windows client (TK) up to at least 5.1.230.7. The vulnerability is a Weak Directory Permission vulnerability in the Windows client that allows a local attacker to execute arbitrary code via specially crafted malware. Connected documents reference a local-...

CVE-2018-6757

McAfee True Key Windows client (TK) vulnerable to local privilege escalation on version 5.1.230.7 and earlier due to issues in the McAfee.TrueKey.Service implementation (notably SecureExecute). Public reports indicate multiple local-elevation vulnerability variants that can allow a non-privileged...

CVE-2018-6756

The CVE-2018-6756 entry concerns McAfee True Key (TK) Windows Client with affected version(s) up to 5.1.230.7, where an Authentication Abuse vulnerability enables local users to execute unauthorized commands via specially crafted malware. Connected documents corroborate local privilege/escalation...

CVE-2018-6756 True Key (TK) Windows Client - Authentication Abuse vulnerability

Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware...

CVE-2018-6755 True Key (TK) Windows Client - Weak Directory Permission Vulnerability

Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...

CVE-2018-6757 True Key (TK) Windows Client - Privilege Escalation vulnerability

Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...

PT-2018-1996

Name of the Vulnerable Software and Affected Versions McAfee True Key versions 5.1.230.7 and earlier Description The issue is related to a privilege escalation vulnerability in the Microsoft Windows client of McAfee True Key, which can be exploited by local users to execute arbitrary code via...

PT-2018-1995

Name of the Vulnerable Software and Affected Versions McAfee True Key Windows Client versions 5.1.230.7 and earlier Description The issue is related to privilege management errors in the McAfee True Key Windows Client, which can be exploited to execute arbitrary commands. This can allow an attack...

PT-2018-1994

Name of the Vulnerable Software and Affected Versions McAfee True Key versions 5.1.230.7 and earlier Description The issue is related to weak directory permissions in the Microsoft Windows client of McAfee True Key, which can be exploited by local users to execute arbitrary code using specially...

CVE-2018-6756: Undefined Security Weakness

Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware...